Release Notes — February 14, 2026

This release brings a massive expansion of cloud integration security checks — with new scanning for Azure, Supabase, Vercel, and Railway — plus a brand new Identity & Access Reviews module to help you manage user access across all your connected services.

New Features

Identity & Access Reviews

You can now manage and review user identities across all your connected integrations from a single view. The new Identity module lets you see every user account across your organization’s tools, merge duplicate identities, assign owners to service accounts, toggle review states in bulk, and export identity data to Excel. Identity support has been added for Heroku, Cloudflare, and Render, with detailed profile views showing last login times, locations, MFA status, and role information.

SIEM Detection Pipeline Enhancements

The detection pipeline now supports grouping keys and actor keys, enabling smarter alert correlation so related events are linked together automatically. New Sigma rule tooling includes dry-run result persistence and admin tools for executing rules across organizations.

Scanner Rule Framework

Every finding and vulnerability is now linked to the specific security rule that produced it. Rules are automatically created during scans and enabled for all organizations, giving you full traceability from detection to remediation.

Scan Page Search

You can now filter your scans by name directly from the scan page, making it faster to find the scan you’re looking for.

Integrations

Azure Cloud Security Scanning

You can now connect your Azure tenant and subscriptions for comprehensive security scanning. Fencer runs configuration checks across your Azure resources and generates architecture diagrams showing how your resources relate to each other — the same experience you already have for AWS and GCP.

Expanded Cloudflare Security Checks

Ten new security checks for your Cloudflare account: exposed origin IP detection, SSL mode validation, WAF rule configuration, rate limiting, bot management settings, API token permission auditing, page rule enforcement, Turnstile configuration, disabled proxy detection, and developer mode alerts.

Expanded Render Security Checks

Seven new checks for Render: public database detection, internal service exposure, shell access without two-factor authentication, outdated runtime versions, missing health checks, cross-environment secret leakage, and overly broad team permissions.

Supabase Security Checks

Comprehensive scanning for your Supabase projects covering the most common misconfigurations: disabled Row Level Security, overly permissive RLS policies, weak authentication settings, public storage buckets, unsecured database webhooks, unrestricted OAuth redirect URLs, and risky Postgres function security settings. Architecture diagrams are also available to visualize your Supabase project structure.

Vercel Security Checks

Security scanning for Vercel now covers deployment protection, environment variable scoping (flagging production credentials exposed to preview deployments), browser verification settings, and firewall configuration. Architecture diagrams show your Vercel project structure.

Railway Security Checks

New checks for Railway projects detect public database URL usage (when internal URLs should be used instead) and generate architecture diagrams for your Railway infrastructure.

GCP SIEM Data Sources

Five new log ingestion pipelines for your GCP environment: Cloud DNS Logs, Cloud Armor Logs, Firewall Rule Logs, Cloud Storage Access Logs, and VPC Flow Logs. Sigma detection rules are now available for VPC Flow Log analysis.

Security

Supply Chain Protection

Fencer now uses dependency cooldown periods when installing packages, adding a buffer before adopting newly published versions to protect against supply chain attacks targeting the window between malicious publication and takedown.

Improvements

• Faster infrastructure-as-code scans — Resolved timeouts in configuration scans that were causing some scans to fail, significantly improving reliability.
• Improved scanner rules page — Better management interface with the ability to see suggested rules to disable and automatically ignore related vulnerabilities when disabling a rule.
• Individual DNS and SSL records — DNS and SSL scan results now show each record on its own row for easier review.
• DigitalOcean container scanning — Kubernetes container scanning is now available for DigitalOcean clusters.
• Scan failure trend reports — Scan failure reports now include historical comparison data for trend analysis.
• Scan status indicator — A live scanning indicator shows which assets are currently being scanned.
• “New” badges — Recently created items now display a “New” label so you can quickly see what’s changed.
• Reduced false positives — Docker container healthcheck vulnerabilities are now automatically filtered out.
• Automatic asset cleanup — Stale assets are now periodically cleaned up to keep your inventory current.
• Profile picture improvements — WebP format is now supported for profile pictures.
• GCP project ID display — The GCP integration configuration page now shows the project ID for easier identification.
• UI polish — Fixed modal and dropdown dismissal behavior, improved scan status badges, and streamlined the onboarding experience for non-admin team members.

Bug Fixes

• Penetration test vulnerabilities scoped to a specific domain no longer appear in the general domain vulnerability list.
• Fixed several SIEM detection rules including the AWS heartbeat rule and ALB threshold configuration.
• Resolved scan failures affecting Semgrep scans, scan trigger messaging, and rescan operations for unsupported scan types.
• Fixed architecture diagram group-by options not working correctly.
• Fixed certificate and logging configuration handling for EKS Kubernetes connections.
• Resolved a PDF report generation error.
• Fixed SIEM storage metrics collection scheduling.
• Corrected handling of certain malformed resource identifiers in scan results.

Coming Soon

We’re actively testing several features that will be rolling out soon:

• Identity & Access Management dashboard — A homepage widget and quick-access links for at-a-glance identity oversight, plus Slack and email notifications for identity changes.
• Google Workspace integration — Sync your Google Workspace user directory for identity and access reviews.
• Railway, Vercel, and Supabase integrations — Full connection and scanning support (security checks are already live for existing connections).
• GitLab integration — Code repository scanning for GitLab-hosted projects.
• Detection deduplication — Smarter SIEM alerting that groups related detections to reduce noise.
• Scanner rule management UI — A dedicated interface for viewing and controlling which security rules are active.
• Faster PDF reports — A new report generation engine for improved speed and reliability.

Interested in early access to any of these features? Reach out to us and we’ll get you set up.